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PUBLIC AFFAIRS 


OFFICE OF THE ASSISTANT TO THE SECRETARY OF DEFENSE 

1400 DEFENSE PENTAGON 
WASHINGTON. D C. 20301-1400 

19 MAY 1995 

Ref: 95-F-0691 



Mr. David A. Banisar 

Electronic Privacy Information Center 
666 Pennsylvania Avenue, SE, Suite 301 
Washington, DC 20003 

Dear Mr. Banisar: 

This letter responds to your March 24, 1995, Freedom of 
Information Act (FOIA) request which was received in this 
Directorate March 27, 1995. 

The enclosed documents are provided as responsive to your 
request . 

There are no chargeable costs for processing your FOIA 
request in this instance. 


Sincerely, 




^assare] 

Director 

Freedom of Information 
and Security Review 


Enclosures : 
As stated 




OFFICE OF THE DEPUTY SECRETARY OF DEFENSE 
The Military Assistant 
31 August 1994 


MEMO FOR: MR. KEITH HALL, DASD/I (C3I) 

Subject: Invite from NRC/NAS 70ct94 

Mr. Deutch's comment on the attached Invitation: 
’’Regret: JMD - Give to Keith Hall" 


Very respectfully, 

Pat Kane 
Colonel, USA 
Military Assistant to the 
Deputy Secretary of Defense 


Attachments 

OSD 17592 

SUSPENSE: 
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NATIONAL RESEARCH COUNdL/NATION-AL ACADEMY OF SCIENCES | 
COMPUTER SCIENCE .AND TElEC0^1MU^^CATIONS BOARD j 
2101 CONSTmmON AVE-, N.W., WASFONGTON, D.C. 2041S 
TELEPHONE: (202) 334-2605 FAX: (202) 334-2318 

DATE: Auguii 29, 1994 NUMBER OF PAGES INCLUDING THIS SHEET: 2 

TO: John Deutch c/o Lynn Cline 703-697-9080 FROM Herb Lin (202-334-3191 voice) 

Professor Deutch: 

■As you may know by now. the NRC’s committee lo study uanouai cryptography poUcy has been 
formed (and a list of the committee attached). The first meeting of the committee will be m October, 
and since you bad expressed an interest in meeting with the committee to provide DOD perspet^es 
on the subject, I am wri ting to solicit your participation at this meeting. In particular, we woufd like 
you to meet with the committee on Friday, October 7, some nme in the morning, probably around 
10:30 AM for about an hour (inclnding discussion with the committee), at the Georgetown facility of 
the NRC. You should also know that we are trying to arrange bnefings from other agencies (e.g.. 
State and Justice), as well as from the inceliigence communin'. 

Your participation at this briefing would be enormously helpful to the committee. 

Thanks in advance. 



Herb Lin 

Study Director and Senior Staff Officer 




rn sn:W NATioj maav rro^i^^yHv mUCY ' 

(TBio^xapiiic^ being upciaied) . : 

tbe U . S . European Coinmaiid in Germany . 

1 ee Bollinger is Provost of Dartmouth CoUege and a coosuninoual scholar. 

Ann Caracrisu . retired, was Deputy- Duector of the NationaJ Security Agency (1980-1982) 

Ctvilem U.S Attorney GenentU 1979-1981). «nd is cuyrotuly in private pntetiee 'ytiP. 
the law firm Venable. Baeqer, Howard and CiviJetti. 

Colin Croo k is Senior Technology Officer for Citicorp 

Samuel Fuller is Vice President of Corporaie Research ai Digoal Equipment Corpor 

l^slieGelb LS Pt«idettl of the CotmeU on Fctetgn Relauo^ He to also served as an Asststoit 
Secretary of State for Politico-Miiitary Affans (1977-1980). 

Rnn.-ild Graham is professor of maifaetnahcs at Rutgers University and .Adjun 
Information Sciences ai AT&T Bell Labs. 

^,fAP.■n i4i>HTnan is professor of Hectrical Engineering at Stanford University. Dr. Hcllnuin 
of the inventors of pubUc key encrypnon. 

ri Ptestdeot of HtUs dl Cotnpatty, and was Depon United States Trade Reptesetttatnte 

(1989-1993). 

Peter Neu ^ is Pnncrpal Scieonst in the t^me^e^of *fACM Ldv 

of the ACM Committee on Computers and Pubhe Policy . and a metnoer 

crypto policy. 

Raymond Orfe is ptes.denl of Iris Associates, a whoUyeawned snbsitliaiy of the Lotus Developmem 
Corporation. Iris Associates is the developer of Lotus Notes. 

Kumar Patel is Vice ChanceUor for Research at UCLA. 

Fdward .Rchmults . retired, was Deputy Anomey General 

President for External Relations and General Counsel for the GTE Corporation. 

Flliot Stone d Executive Diteaot of the Massachusetts Health Data Consomum which is respjnsible 
tor the coUection and analysis of tbe stare's large health cue databases. , 

WilUs Ware retirecL with RALID Corporation as senior computer scientist emeriti^. He chairs the 
SSf itlJ.u.Tsecurity Act) Computet System Secunty and Privacy Advtsoty Board. , 


• JR !, . , 


Remarks for 

Mr. Keith Hall, DASD(I&S) 
on the 

NRC’s Study of National Cryptography Policy 
7 October 1994 



0 On behalf of Dr. John Deutch, the Deputy Secretary of Defense, 1 am 
pleased to welcome you to Washington, and honored to be here to address the 
NRC 's National Cryptography Policy Study Team. 


0 In its 1991 Publication ^^Comouters at Risk, ” the National Research 
Council noted that: . . the Government ’s efforts /in securing its information 

infrastructurey have been hamstrung by internecine conflict and underfunding. ” 
The NRC continued by stating: “These problems currently appear to be 
exacerbated, at precisely the time that decisive and concerted action is needed 
A coherent strategy must be developed now, given the time, resources, planning, 
and coordination required to achieve adequate system security and 
trustworthiness. ” 

0 For its part the Department is reviewing its ability to provide 
additional resources designed to secure a significant portion of the Defense 
Information Infrastructure from attack. 

0 In studying national cryptography policy, you have been charged with 
developing policy recommendations in arguably the most strategically 
important, technologically dynamic, difficult and complex subject areas in the 
Defense arena. In addressing them I suggest to you that the Defense 
Department is not . . on the outside looking in'* on your study. 

0 We have a stake in every facet of your study: 

— as customers of cryptography, to include Key Escrow 

technologies. 
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— as being increasingly dependent on the Public Switched 
Network/National Information Infrastructure, 

— and as the Department assigned the responsibility of securing 
the nation ’s and the public ’s freedoms in a rapidly changing ‘information 
based” world. 

# The Department ’s stake is not parochial. It is a matter of concern to 
the American people, for to the extent that our Defense Information 
Infrastructure is placed at risk, so too are the lives of the Service men and 
women who serve on our front lines. 

Accordingly, DoD is committed to working with you, within the 

government, and with industry in developing and implementing technologies 
such as Key Escrow and national cryptography policies that enhance the 
security of the nation, the freedoms of its citizens, and the competitiveness of its 

industries. 

# In defining the Department ’s perspective on the study, I thought it 
would be usejul to address briefly some of the key provisions of your task, the 
first being: 

The Impact of current and possible restrictions on and standards 
for cryptographic technology. 

# The Department is not in the business of restricting US industry, its 
citizens, or its technologies. We do not see the competitiveness of US industry 
as exclusive from, or opposed to, national security interests. Changes in 
industrial security, for example, are aimed at promoting the concept that sound 
security is a joint concern of the department and its industrial infrastructure. 

We are actively developing revised security arrangements that treat this matter 
as a Defense/Industry partnership. 

# Given the diversity and competency of this study team, there are great 
expectations regarding your ability to develop recommendations which keep 
industry competitive, and enable the Department and law enforcement agencies 
to maintain the nation ’s security, and the safety and privacy of its citizens in an 
increasingly invasive information age. 
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The strength of various cryptographic technologies known today 
and anticipated for commercial and private purposes, and 
strenSs and weaknesses of current Key Escrow plans. 

• IVe believe Clipper with its Key Escrow technology provides the 
strength necessary to protect American communications now and well into 
fuZTlZy^to examine the Government’s position and validate its truth. 

Current and anticipated demand for information systems security 
based on cryptography. 

• ms ‘‘demmd” needs to be confimedcmd clearly documented. 1 

have not seen any specific evidence suggesting the size of the potential mar^t 
^-hare Although! am aware that certain industry representatives beh^e it 
'large I would be interested in seeing your results. Anecdotal comments 
regarding the potential for overseas commerce m crypto^aphy cm be a 

bZs for Administration cryptographic policy decisions that could a y 

affect Government ’s ability to protect individual Itberties. enmre public saf ty, 
Zi develop timely intelligence on events transpiring »"-c«Shoutm 
increasingly unstable world The bottom line on this issue is: The ntmon 
cannot afford to trade critical intelligence capabilities and its security for 
possibility of increased commerce. 

Your tasks also ask you to assess. 

The impact of foreign restrictions on the market for, importation, 

Ind use of our cryptographic technologies, and the adequacy of US 
cryptographic and cryptographic export policies. 

~ Given the reality ofglobal connectivity, the Department IS veiy 

interested in your findings on the formation of foreign cryptographic policies 
ZdhowZyZict ufn [forei^] national security egimies. the desires of the 
commercial sector and on private citizens. We will also be interested in ary ^ 
differences you may find between stated policy(ies) and on how the policy(ies) . 

(are) actually implemented. 

~ Having determined foreign government cryptographic policies and 

their actual implementation of them, you will be in a good position to 


is 
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accomplish your assessment of the adequacy of our own cryptographic policies 
in meeting the interests of the Government, business and the public. 

How technology now and In the future affects policy for balancing 
US security, law enforcement, privacy, and commercial Interests. 

0 Ido not need to emphasize the technologically driven nature of the 
issue. However, I must again emphasize that defense of the nation, law 
enforcement, and the privacy and safety of US citizens are not (as conventional 
wisdom and even the wording of the study issue strongly suggests) mutually 
exclusive interests. In fact, the widely reported concerns of Americans over 
crime and their scfety constitute a very close relationship between our citizens, 
the law enforcement and national security communities. Far from being against 
measures designed to enhance their security, safety, and privacy, Americans 
are for them. 

# Discuss the need for cryptographic technologies and policies that help 
to secure the National Information Infrastructure in an increasingly 
interconnected world. The Department and the nation s security, economic 
health, our standard of living, the scfety and freedoms of our people are 
increasingly dependent on the security of the NIL 

9 Key Escrow does not signal the arrival of “Big Brother. ” As recent 
INTERNET break-ins illustrate, “big brothers, ” not identifiable or subject to US 
laws, are currently active and are “into'" your lives. Unless checked by security 
technologies such as CUPPER and its Key Escrow, these “big brothers’^ could 
soon seriously affect the nation 's security, your safety, businesses, privacy, and 
bank accounts. 

# Because of this, throughout your study efforts take a close look at 
information as a commodity. Information and data (as used in control systems 
from building air conditioners, to the air traffic control system, to the national 
power grid) and its integrity, availability, and accuracy is the key to this 
nation ’s way of life -In short, it is America 's lifeblood. 


# I ask you to consider: 
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— The increasing technological pace of information and digital 
control systems development. Information and data technologies are rapidly 
becoming ubiquitoiis. 

— The domination of information workers over those in the 
manufacturing sector. 

— Mobile/cellular communications and electronic leashes 

(pagers) 

— All held together by an increasingly vulnerable/high- 
value/high payoff target -- the nation ’s public switched network 

^ Information, and the systems in which it is processed, has had 
profound effects on warfighting. The very essence of war and national security 
is being transformed as I speak. 

— National Strength: Has transformed from 
Industrial/Economic Supremacy to Information Supremacy 

— Threats to the nation: Have transformed from Superpowers 
and Regional powers to Supranational and non-government organizations. 

— Weaponry: Has transformed from bombs and bullets to bits 
and bytes/zeros and ones. 

— Attack planning and execution: Has transitioned from 
months, weeks, and hours to hours, minutes, and seconds. 

~~ Command and Control: Has transformed from 
organic military and driven by military requirements, to Industrial based/COTS 
and driven by the marketplace. 

— Enemy Objectives: Have transformed from Damage to C2 
systems and forward deployed US Forces to Damage, corruption, and 
destruction of the domestic infrastructure. 

— Attacks: Have transitioned from wartime to continuous. 
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— Attackers: Have transitioned from well defined/known 
adversaries to anyone - any group — any nation. 


# Keep in mind the international nature of Information Warfare 
(INFOWAR) activities. The ability to wage devastating Information Warfare 
attacks against a nation like ours -- increasingly dependent on its information 
systems and supporting public infrastructure -- does not require superpower 
status. Bear in mind: 

~~ The ability to wage INFOWAR to deny, deceive and/or exploit 
information and the systems in which they reside, is not restricted to economic 
superpowers. Through global communications people, interest groups, and 
nations without great resources can currently safely play very destructive and 
theoretically decisive roles. 

— NSA estimates 95% of all illegal entries into DoD information 
systems are undetected. 

— The need for the United States to maintain Information 
Warfare and Information System Security superiority. 

^ As a concession to my sense of symmetry, since I began this talk with 
a quote from the NRC, I feel obligated to close with one from the Joint Security 
Commission. The quote frames the challenges and responsibilities you 
shoulder in developing recommendations to guide the development of national 
cryptography policy, and clearly states the stakes for the nation in the 
information age. 


— ''This technology [information warfare] is capable of 
deciding the outcomes of geopolitical crises without the firing of a single 
weapon. Our security policies and processes must protect our ability to 
conduct such infowars while denying the enemy that same advantage. ” 

# Again, on behalf of Secretary Deutch, It has been my pleasure to be 
here - In the time I have remaining, I would be happy to entertain your 
questions regarding the Department 's perspective on your study. 



COMMAND. CONTROL.. 
COMMUNICATIONS 
AND 

intelligence 


ASSISTANT SECRETARY OF DEFENSE 

WASHINGTON. D C. 20301-3040 

November 8, 1994 


Honorable Dennis DeConcini 

Chairman, Select Committee on Intelligence 
United States Senate 
Washington, DC 20510 

Dear Mr. Chairman: 

Section 267 of the National Defense Authorization Act 
for Fiscal Year 1994 directed a 30 month Comprehensive 
Independent Study of National Cryptography Policy be 
conducted by the National Research Council (NRC) . 

Accordingly, the NEC's study team held their first meeting on 

October 7, 1994. 

The Department is fully supporting the NEC's efforts. 

We expect the NRC to complete the study and submit its public 
report and the classified annex to it not later than May 31, 
1997. The Defense Secretary's report to the Committee will 
follow within 120 days. 


Sincerely, 



cc : 

Honorable John Warner 
Ranking Minority Member 




COMMAND. CONTROL. 
COMMUNICATIONS 
AND 

intelligence 


ASSISTANT SECRETARY OF DEFENSE 

WASHINGTON, D C, 20301-3040 

November 8, 1994 


Honorable Joseph Biden Jr. 

Chairman, Committee on the Judiciary- 
United States Senate 
Washington, DC 20510 

Dear Mr . Chairman : 

Section 267 of the National Defense Authorization Act 
for Fiscal Year 1994 directed a 30 month Comprehensive 
Independent Study of National Cryptography Policy be 
conducted by the National Research Council (NRC) . 

Accordingly, the NRC's study team held their first meeting on 

October 7, 1994. 

The Department is fully supporting the NRC's efforts. 

We expect the NRC to complete the study and submit its public 
report and the classified annex to it not later than May 31, 
1997. The Defense Secretary's report to the Committee will 
follow within 120 days. 


Sincerely, 



Honorable Orrin Hatch 
Ranking Minority Member 



COMMAND. CONTROL. 
COMMUNICATIONS 
AND 

intelligence 


ASSISTANT SECRETARY OF DEFENSE 

WASHINGTON. D C. 20301-3040 

November 8, 1994 


Honorable Sam Nunn 

Chairman, Committee on Armed Services 
United States Senate 
Washington, DC 20510 

Dear Mr. Chairman: 

Section 267 of the National Defense Authorization Act 
for Fiscal Year 1994 directed a 30 month Comprehensive 
Independent Study of National Cryptography Policy be 
conducted by the National Research Council (NRC. 

Accordingly, the NRC's study team held their first meeting on 

October 7, 1994. 

The Department is fully supporting the NRC's efforts. 

We expect the NRC to complete the study and sxjbmit its public 
report and the classified annex to it not later than May 31, 
1997. The Defense Secretary's report to the Committee will 
follow within 120 days. 


Sincerely, 



cc : 

Honorable Strom Thurmond 
Ranking Minority Member 




COMMAND. CONTROL. 
COMMUNICATIONS 
AND 

intelligence 


ASSISTANT SECRETARY OF DEFENSE 

WASHINGTON. D C. 20301-3040 

November 8, 1994 


Honorable Jack Brooks 
Chairman, Committee on the Judiciary 
House of Representatives 
Washington, DC 20515 

Dear Mr . Chairman : 

Section 267 of the National Defense Authorization Act 
for Fiscal Year 1994 directed a 30 month Comprehensive 
Independent Study of National Cryptography Policy be 
conducted by the National Research Council (NRC) . 

Accordingly, the NRC's study team held their first meeting on 
October 7, 1994. 

The Department is fully supporting the NRC's efforts. 

We expect the NRC to complete the study and submit its public 
report and the classified annex to it not later than May 31, 
1997. The Defense Secretary's report to the Committee will 
follow within 120 days. 



CC : 

Honorable Hamilton Fish 
Ranking Minority Member 




COMMAND. CONTROL, 
COMMUNICATIONS 
AND 

rNTELLlGENCE 


ASSISTANT SECRETARY OF DEFENSE 

WASHINGTON. D C. 20301-3040 

November 8, 1994 


Honorable Dan Glickman 
Chairman, Permanent Select 
Committee on Intelligence 
House of Representatives 
Washington, DC 20515 

Dear Mr. Chairman: 


Section 267 of the National Defense Authorization Act 
for Fiscal Year 1994 directed a 30 month Comprehensive 
Independent Study of National Cryptography Policy be 
conducted by the National Research Council (NRC) . 

Accordingly, the NRC' s study team held their first meeting on 

October 7, 1994. 

The Department is fully supporting the NRC's efforts. 

We expect the NRC to complete the study and submit its pxiblic 
report and classified annex to it not later than May 31, 

1997. The Defense Secretary's report to the Committee will 
follow within 120 days. 


Sincerely, 



Emmett Paige , 


cc : 

Honorable Larry Combe st 
Ranking Minority Member 





COMMAND. CONTROL. 
COMMUNICATIONS 
AND 

intelligence 


ASSISTANT SECRETARY OF DEFENSE 

WASHINGTON. D.C. 20301 -3040 

November 8, 1994 


Honorable Ronald V. Dellums 
Chairman, Committee on Armed Services 
House of Representatives 
Washington, DC 20515 

Dear Mr, Chairman: 

Section 267 of the National Defense Authorization Act 
for Fiscal Year 1994 directed a 30 month Comprehensive 
Independent Study of National Cryptography Policy be 
conducted by the National Research Council (NRC) . 

Accordingly, the NRC's study team held their first meeting on 
October 7, 1994. 

The Department is fully supporting the NRC's efforts. 

We expect the NRC to complete the study and submit its public 
report and the classified annex to it not later than May 31, 
1997. The Defense Secretary's report to the Committee will 
follow within 120 days. 


Sincerely, 


cc : 

Honorable Floyd D. Spence 
Ranking Minority Member 
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ASSISTANT SECRETARY OF DEFENSE rr^ ! C.'2' 
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(C3) /ISS/58705 


MEMORANDUM FOR DEPUTY SECRETARY OF DEFENSE 

FROM: EMMETT PAIGE, JR., ASD(C3I) 

Prepared by: B. Valeri/OASD{C3 

=^UBJECT: Department of Defense Support of the National 

Research Council's (NRC) Comprehensive 
Independent Study of National Cryptography 
Policy — ACTION MEMORANDUM 


PURPOSE: Pursuant to Congressional direction, forward 

letters to the Secretaries of State, Treasury, 
Justice, Commerce, and Energy, the Director, 

Central Intelligence Agency, and the Directors of 
selected Defense agencies reguesting their 
support of the subject study. 

DISCUSSION: Congressional language authorizing the subject 

NRC study (Section 267, of the Defense 
Authorization Bill for FY 1994), directed the 
Department of Defense to " • • • cooperate fully 

with the National Research Council in its 
activities. . • " The legislation also 

directed the Secretary of Defense to . . • 

request all other appropriate Federal 
Departments and agencies to provide similar 
support . " 


The attached letters satisfy Congressional 
direction and will support the successful 
accomplishment of the NRC' s study effort. 


RECOM-IENDATION: 


Recommend 
TAB A. 


that you sign the letters at 

wk 


DEPSECDEF DECISION: 
Approved 
Disapproved 
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DEPUTY SECRETARY OF DEFENSE 


1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301-1010 


2 1 FEB 1995 



MEMORANDUM FOR DIRECTOR, NATIONAL SECURITY AGENCY 

SUBJECT: National Research Council Study of National 

Cryptography Policy 


In the National Defense Authorization Act for Fiscal 
Year 1994 (Section 267) Congress directed that the National 
Research Council (NRC) conduct a comprehensive independent 
study of cryptographic technologies and national 
cryptography policy. 

The NRC is currently under contract to the Department 
and has initiated their data collection activities. The 
successful accomplishment of this study effort will require 
the Department's full cooperation. I am, therefore, 
requesting that you identify an agency point of contact 
(POC) to serve as a facilitator for the NRC 's efforts. By 
establishing a direct line of communications between your 
agency and the NRC. we can assist greatly in the development 
of an informed and useful report. 

Please provide the name, title and telephone number of 
the POC to both Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department's POC who is the Director for 
Information Systems Security. Dr. Lin can be reached at 
202/334-3191- Mrs. Valeri can be reached at 703/695-8705 
and is available to answer any questions you have have on 
this requirement . 
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DEPUTY SECRETARY OF DEFENSE 

1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301-1010 

2 2 FEB 1SS5 


memorandum for director, defense information systems agency 

SUBJECT: National Research Council Study of National 

Cryptography Policy 


In the National Defense Authorization Act for Fiscal 
Year 1994 {Section 267) Congress directed that the National 
Research Council (NRC) conduct a comprehensive independent 
study of cryptographic technologies and national 
cryptography policy. 


The NRC is currently under contract to the Department 
and has initiated their data collection activities. The 
successful accomplishment of this study effort will require 
the Department's full cooperation. I am, therefore, 
requesting that you identify an agency point of contact 
(POC) to serve as a facilitator for the NRC's efforts. By 
establishing a direct line of communications between your 
agency and the NRC, we can assist greatly in the development 
of an informed and useful report. 

Please provide the name, title and telephone number of 
the POC to both Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department's POC who is the Director _ 

Information Systems Security. Dr. Lin c^ 

202/334-3191- Mrs. Valeri can be reached at 703/6yb B/uo 
and is available to answer any questions you have have on 
this requirement. 
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DEPUTY SECRETARY OF DEFENSE 


1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301-1010 


2 2 FEB 1995 


MEMORANDUM FOR DIRECTOR, ADVANCED RESEARCH PROJECTS AGENCY 

SUBJECT: National Research Council Study of National 

Cryptography Policy 


In the National Defense Authorization Act for Fiscal 
Year 1994 (Section 267) Congress directed that the National 
Research Council (NRC) conduct a comprehensive independent 
study cf cryptographic technologies and national 
cryptography policy . , 

The NRC is currently under contract to the Department 
and has initiated their data collection activities. The 
successful accomplishment of this study effort will require 
the Department's full cooperation. I am, therefore, 
requesting that you identify an agency point of contact 
(POO to serve as a facilitator for the NRC's efforts. By 
establishing a direct line of communications between your 
agency and the NRC, we can assist greatly in the development 
of an informed and useful report. 

Please provide the name, title and telephone number of 
the POC to both Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department's POC who is the Director f _ 
Information Systems Security. Dr. Lin can be 
202/334-3191- Mrs. Valeri can be reached at 703/695-8700 
and is available to answer any questions you have have on 
this requirement. 
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DEPUTY SECRETARY OF DEFENSE 

1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301-1010 


Admiral William 0. Studeman, U.S. Navy 
Acting Director, Central Intelligence Agency 
Washington, DC 20515 

Dear Admiral Studeman: 

In the National Defense Authorization Act for Fiscal 
Year 1994 (Section 267), Congress directed 

Defense to request that the National Research Council (NRC) 
conduct a comprehensive, independent study or cryptographic 
technologies and national cryptography policy. 

The NRC is currently under contract to the Department of 
Defense for the performance of this study and has initiated 
their data collection activities. Because the scope of 
NRC study involves a wide range of government and private 
sector activities and perspectives, its successful 
accomplishment will depend on the full cooperation o^ ^ . 
departments and agencies outside of ^ ‘ 

Therefore, I solicit the Central Intelligence Agency s 
cooperation in the study and ask that you 
contact (POO to serve as a facilitator for the ^ 

3y establishing a direct line of communications between t 
aopropriate parties within the NRC and the interested 
go?erLent entities, we can assist greatly in the development 
of an informed and useful report. 

Please provide the name, title and telephone number of 
your POC to both Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department's POC who is the Director 

Information Systems Security. Dr. Lin ^®/®Q3/go5!8705 

202/334-3191. Mrs. Valeri can be contacted at 703/69 

and is available to answer any questions you may have on this 

request. 

Thank you for your assistance in this matter. 


Sincerely, 



ohn M. Deutch 


DEPUTY SECRETARY OF DEFENSE 

1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301- 1010 



Honorable Ronald H. Brown 

Secretary of Commerce 

Herbert C. Hoover Building 

14th Street & Constitution Avenue, N.W. 

Washington, DC 20230 


Dear Mr. Secretary: 

In the National Defense Authorization Act . 

Year 1994 (Section 267), Congress directed 

Defense to request that the National Research Council (NR ) 
coLuct a com^ehensive, independent study of cryptographic 
technologies and national cryptography policy. 

The NRC is currently under contract to ^^® 

Defense for the performance of this stuay and has i 
their data collection activities. Because the scope of t 
NRC study involves a wide range of government and private 
sector activities and perspectives, its successful 
accomplishment will depend on the full cooperation o 
deoartments and agencies outside of the Department of Defense. 
ThLefore, I solicit the Department of Commerce's 
in the study and ask that you identify a point of contact 
(?0C) to se^ve as a facilitator for the NRC' s efforts By 
establishing a direct line of communications between t 
appropriate parties within the NRC and the intereste 
go?e?ment entities, we can assist greatly in the development 
of an informed and useful report. 

Please provide the name, title and telephone number or 
your POC to both Dr. Herb Lin of the NRC and Mrs . Baroara 
Valeri, the Department' s POC who is the Director for 

Information Systems Security. Dr. Lin ^®/®®3/g95_g705 

202/334-3191. Mrs. Valeri can be contacted at 70V695 8 
and is available to answer any questions you may have on this 

request. 

Thank you for your assistance in this matter. 

^incerely. 





[John M. Deutch 




DEPUTY SECRETARY OF DEFENSE 


1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301-101 


O 


ll 


Honorable Warren Christopher 
Secretary Of State 
Main State Department Building 
2201 C Street, N.W. 

Washington, DC 20520 


Dear Mr. Secretary; 

In the National Defense Authorization Act for Fiscal 
Year 1994 (Section 267), Congress directed Secretary of 

Defense to reouest that the National Research Council (NRC) 
conduct a comprehensive, independent study of cryptographic 
technologies and national cryptography policy. 

The NRC is currently under contract to the Department of 
Defense for the performance of this study and has initiated 
their data collection activities. Because the scope of the 
NRC study involves a wide range of government and private 
sector activities and perspectives, its successfu 
accomplishment will depend on the full cooperation of 
departments and agencies outside of the Department of Defense. 
ThLefore, I solicit t.he Department of State s cooperation in 
the study and ask that you identify a point of contact (POC) 

•-o se^'ve as a facilitator for the NRC' s efforts. By 
establishing a direct line of communications between the 
aoprooriate parries within the NRC and the interested 
government entities, we can assist greatly in the cevelopmen 
of an informed and useful report. 

Please provide the name, title and telephone number of 
your POC to both Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department's POC who is the Director for 
Information Systems Security. Dr. Lin 

202 / 334-3191 • Mrs. Valeri can be contacted at 703/6So o uo 
and is available to answer any questions you may have on this 
request . 

Thank you for your assistance in this matter. 


Sincerely, 



ohn M. Deutch 


DEPUTY SECRETARY OF DEFENSE 

1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301-1010 

II lSr3 


Honorable Hazel R. O'Leary 
Secretary of Energy 
Forrestal Building 
1000 Independence Avenue, S.W. 
Washington, DC 20585 


Dear Madame Secretary: 

In the National Defense Authorization Act for Fiscal 
Year 1994 (Section 267), Congress directed the Secretary of 
Defense to request that the National Research Council ) 

conduct a comprehensive, independent study of cryptographic 
technologies and national cryptography policy. 

The NRC is currently under contract to the Department of 
Defense for the performance of this study and has initiated 
their data collection activities. Because the scope of the 
NRC study involves a wide range of government and private 
sector activities and perspectives, its successful 
accomplishment will depend on the full cooperation of 
departments and agencies outside of the Department of Defense. 
Therefore, I solicit the Department of Energy's cooperation in 
the study and ask that you identify a point of contact (POC) 
to serve as a facilitator for the NRC' s efforts. By 
establishing a direct line of communications between the 
appropriate parties within the NRC and the interested 
government entities, we can assist greatly in the Development 
of an informed and useful report. 


Please provide the name, title and telephone number of 
your POC to both Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department's POC who is the Director 
Information Systems Security.' Dr. Lin 

202/334-3191. Mrs. Valeri can be contacted at 703 /d 9 o-«/ud 
and is available to answer any questions you may have on this 
request . 


Thank you for your assistance in this matter. 

lincerely. 



jihn M. Deutch 


f/ 


DEPUTY SECRETARY OF DEFENSE 

lOlO DEFENSE PENTAGON 
WASHINGTON. DC 20301-1010 

ll F" 



Honorable Janet Reno 

Attorney General of the United States 
Main Justice Building 

10th Street & Constitution Avenue, N.W. 

Washington, DC 20530 

Dear Madame Attorney General: 

In the National Defense Authorization Act for Fiscal 
Year 1994 (Section 267), Congress directed Secretary of 

Defense to request that the National Research Councxl (NRC) 
conduct a comprehensive, independent study of cryptographic 
technologies and national cryptography policy. 

The NRC is currently under contract to the Department of 
Defense for the performance of this study and has initiated 
their data collection activities. Because the scope of the 
NRC study involves a wide range of government and priva e 
sector activities and perspectives, its successful 
accomplishment will depend on the full cooperation o 
departments and agencies outside of the Department of Defense. 
Therefore, I solicit the Department of Justice s cooperation 
in the study and ask that you identify a point of contact 
(POC) to serve as a facilitator for the NRC' s efforts. y 
establishing a direct line of communications between the 
appropriate parties within the NRC and the interested 
government entities, we can assist greatly in the development 
of an informed and useful report. 

Please provide the name, title and telephone number of 
your POC to both Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department' s POC who is the Director 
Information Systems Security. Dr. Lin 
202/334-3191* Mrs. Valeri can be contacted at 703/695 
and is available to answer any questions you may have on this 

request . 

Thank you for your assistance in this matter. 


incerely. 



jonn M. Deutch 



DEPUTY SECRETARY OF DEFENSE 

1010 DEFENSE PENTAGON 
WASHINGTON. DC 20301-1010 


2 1 FE- 


Honorable Robert E. Rubin 
Secretary of the Treasury 
Main Treasury 

1500 Pennsylvania Avenue, N.W. 
Washington, DC 20220 


Dear Mr. Secretary: 

In the National Defense Authorization Act for Fiscal 
Year 1994 (Section 267), Congress directed the Secretary o£ 
Defense to request that the National Research Council (NRC) 
conduct a comprehensive, independent study o cryp og 
technologies and national cryptography policy. 

The NRC is currently under contract to 
Defense for the performance of this study and has initiated 
?he!rLta collection activities. Because scope of the 

NRC Study involves a wide range of government and private 
sector ^tivities and perspectives, its successful 
aJLmplishment will depend on the full cooperation of 
departments and agencies outside of the Department of Defense. 
Therefore, I solicit the Department of Treasury s 

in the study and ask that you By 

(POC) to serve as a facilitator for the NRC s efforts, ay 
establishing a direct line of communications between ci e 
%pJop-ate parties within the NRC and the interestea 
government entities, we can assist greatly m the ceve-opment 
of an informed and useful report. 

Please provide the name, title and telephone number of 
your POC to hath Dr. Herb Lin of the NRC and Mrs. Barbara 
Valeri, the Department's POC who is the Director o 

Information Systems Security. Dr. Lin ^®/®Q 3 /gQ 5 _g 705 

202/334-3191. Mrs. Valeri can be contacted at 70^695 8705 
and^is available to answer any questions you may have on this 

request . 

Thank you for your assistance in this matter. 


^incerely. 



/jdhn M. Deutch 



NATIONAL ACADEMY OF SCIENCES 

SlOl Co«i«t.lion A*»« Wasbl.g.01., DC 20418 


OFFICE OF CONTRACTS AND GRANTS 
FAX: (102)334-2797 


OFnCE LOCATION; 
CccQ tnd Ida Gnca Bnildine 
2001 WbcoBsln Aveooe NW« Room GR406 


May 20, 1994 


Ms. Barbara L. Valeri 
Director of Infonnadoa Systems Security 
Office of the Assistant Secretary of Defense 
Washington. DC 20301-3040 


RE: 


Proposal No. 94-154-01; •'National Cryptography PoUcy" 


Dear Ms. Valeri: 

is in «sponss .0 fll« 

containsd in Enclosure 1 of yOT ^SL^madeVyoor leUet; responses hnve been prepiued by 
0 / Scl^c. and Telecomnmmcadons Board, Comreission on 
Physical Sciences, Mathematics, and Applications. 

i, m me has esnibUshed tough 

SCI billets for those committw ^ ^ose individuals with a strict 

Nominations to receive SCI dear^ces non-SCI classified mformation have 

Industrial Security Clearance Office (DISCO). 

, b. A package of nanres for individ.^ to c^«s 

forwarded to the Departm^ of ^ PY 1994), it is anticipated 

Piihlic Law 103-160 (The Defense Authorization Act or t r lyy h 

^ “ S SSseareh CouncU 

to conduct the study. 

agreements. 

, i The me review procesa ereaila two separate but related steps to insure die inteUectual 
integrity of NRC reports. 

+ The to Step b the review of the draa report by individual nm^i^ 

is eSier an alteration of the manuscript m response to a (^mrnent, 
statement that explains why the committee chose not to alter e m 


1 


uo/ 


X V . X -* 


. The second «ep is takes by -5^ 

comimte examines the ^ an adequate 

the revised mmuscnpt to ensure that ^ ^ ^on the RRC may suggest 

job in responding to reviewer commen . • ^ •* readv for transmittal 

changes iteelf. Once the RRC approves a manu«:npt, it is ready 

to the sponsor. 

If the draft report includa classified ^tSg^sueh material, 

dearances wiU be selected as reviewets for those seettons contaimnn 

1 e Not included in your request 

■ ' arr *■ “ 

disclosed. 

• • 

2 a through 2d, j 9 and 3 of our proposal under Project Content, 

In addition to the items listed on pages 2 and :» 01 p 

die study wU also address: 

eurrem and anUdpat«i demand for Mornretion systems securi^ 

cryptography. 

+ the impart of foreign restrietions on the use of. importsfion of, and the market 
for oTptographic technology. 

+ the extent to svhioh current cryptography poUcy is ad«^ for protecting U.S. 

*S^L p^.P»bUc safety, naaonalseornty, and econo^^ 

competitiveness. 

+ tednriealstr««ths and weaknesses of tamern key escrow impto^ 

schemes. 

3 . While feere are eurrenUy no oT 

an appropriate point for the project to consider. 

orraf/iino thft foresouie or require further clarification, please 

project 

Elaine M. Smialek 
Contract Manager 

cc; H. Lin 

M. Blumcnthal 


OFFICE OF THE ASSISTANT SECRETARY OF DEFENSE 



COMMAND CONTROL 
COMMUNICATIONS 

and intelligence 


WASHINGTON. DC 20301-3040 


!j!AY V334 


Ms. Elaine M. Smilek 
Contract Manager, Office of 
Contracts and Grants 
National Academy of Sciences 
2101 Constitution Avenue 
Washington, D.C. 20301-6000 


Dear Ms. Smilek, 

The Department of Defense has completed its review of your Statement of 
Work (SOW), Proposal No. 94-CPSMA-1 54, for a 32 Month "tudv ent.^ 

"National Cryptography Policy . " Recommended changes to the SOW and requests 
for clarification are provided in Enclosure 1. I believe the changes offered will 
satisfactorily address the security concerns of the Department and help promote 

the development of a highly useful product. The Department is prepared to 

proceed wltly the study upon agreement on the SOW provisions. I would be happy 
to meet with you and other staff members to facilitate this process. 

My action officers for the study are Messrs. William Freestone and Jeff 
Gavnor. They can be contacted at: (703) 602-5878 and 602-5876 respectiveiy. 


Sincerely, 

"I 

Barbara L. Valeri 

Director of Information Systems Security 


Enclosure 


Review of the National Research Council Statement of Work 
Study Proposal Number 94-CPSMA-154 
"National Cryptography Policy" 


1 , The proposed study will require access to extremely sensitive information, the 
divulgence of which could cause grave damage to the nation's security. 

Accordingly, the following security specifications should bo added to the 
Statement of Work (SOW) to bring the study into compliance with national 
regulations for the handling of Special Intelligence and cryptographic information. 

a. The SOW contemplates the clearing of up to 5 panel members for access 
to Sensitive Compartmented Information (SCI). Inasmuch as the panel will require 
administrative support, the number of panel members cleared to SCI should be 
limited to three with a similar number of administrative/clerical personnel being 
cleared to the same level. 

b. The SOW should specify when security clearance applications will be 
submitted. 

c. The SOW should include a provision that access to classified data is 
contingent on the successful completion of required background checks and 
investigations, and the execution of non-disclosure agreements. 

d. The SOW makes reference to NRC "review procedures." Materials 
describing the procedures should be forwarded to this office for review in order for 
the Department to determine if they are appropriate in the context of the proposed 
study. Once approved, include the review procedures in the SOW. 

f. Include in the SOW a provision which requires submission of the report to 
DoD for security review (to prevent Inadvertent disclosures of classified 
information), before the study is published in final form. 

2 jhe Project Content portion of the SOW should include the NRC's study of. 

a. Current and anticipated demand for information systems security. 

b. The impact of foreign restrictions on the use of, and market for, 
cryptographic technology. 

• NOTE: Many countries Impose restrictions on the cryptography 
that may be imported into their countries or connected to their public switched 
networks. This suggests that a "free market" for encryption may never exist. This 
could be a significant factor in projecting future markets. 


Enclosure 1 


C The extent to which current cryptographic policy satisfies the interests of 
orivacv public safety, national security, and competitiveness. In doing so, 
reliewer^wiil be abVe to compare what the policy is doirrg well and what ,t ,s not. 

d. Alternatives to current key escrow implementation. T^e should 

specifically address whether key escrow encryption cah I’® . 

software with assurance that communications wiil be secured, and that t e y 

escrow mechanism can not be bypassed. 

3 The Prniprt Content section of the SOW includes a provision that 
reflect a misuriderstanding of current regulations. Since there are no U.S. imposed 
rfstr^tiolTs on U.S. user use of encryption, here or abroad, query the rationale for 
studying the impact of restrictions on ”the competitiveness and performance of 
commercial US users of such technology . " 


Comparison of the National Research Council Response 
to DoD ISS Letter of 2 May 1994 
Study Proposal Number 94-CPSMA-154 
"National Cryptography Policy" 


The NRC has responded to our 2 May 1994 letter. Below is an analysis of their 
response to the issues raised in our letter and a copy of their response. 


ISS Letter - Paragraph la: The SOW contemplates the clearing of up to 5 panel 
members for access to Sensitive Compartmented Information (SCI). Inasmuch as the 
panel will require administrative support, the number of panel members ^ 

should be limited to three with a similar number of administrative/clerical personne 

being cleared to the same level. 



ISS Letter - Paragraph 1b: The SOW should specify when security clearance 
applications will be submitted. 


NRO Respwsp aeararK^ packages wilj be forward^ to 

notes".!, inaccofilancb with PubtfOiaw 103-160 (Def^e Authom^cat Actof FV 
1994) it is antt<^ateb:We wiit to the fullest degree possible expedite the processing 
of security clearances for the study. 


ISS Letter - Paragraph 1c: The SOW should include a provision that access to 

classified data is contingent on the successful completion of required background 
checks and investigations, and the execution of non-disclosure agreements. 


NRC Response AnaTysisf Concur. 


ISS Letter - Paragraph Id: The SOW makes reference to NRC "review procedures. " 

desoriblng'the procedures should be forwarded to 
order for the Department to determine if they are appropriate in the context of the 
proposed study. Once approved, include the review procedures in the SOW. 

NRC Response Anahrsis: NRC provided the "fwo separate steps*' of their 

ere de^rtil to ". . . ensure tfte milectuarinmritY fC 
Ztosts." As such, the steps have nothing to do with thr seounty concerns or 
damage to naSonal security raised by us in item 1 d. 


The me does note that indMduals with security clearances will r&vi&w iostcnsibty 
for *7nteffectu9f imegnity^ any claastfied portions of the study. Regardless, the 
quesdort of NRC security re^^w procedures remains unanswered- 


ISS Letter - Paragraph If: Include in the SOW a provision which requires submission 
of the report to DoD for security review (to prevent inadvertent disclosures of 
classified information), before the study is published in final form. 

NRC Response Analy^r Concur. 


ISS Letter - Paragraphs 2a through 2d: The Project Contegt portion of the SOW should 
include the NRC's study of: 

a. Current and anticipated demand for information systems security. 

b. The impact of foreign restrictions on the use of, and market for, 
cryptographic technology. 

• NOTE: Many countries impose restrictions on the cryptography that 
may be imported into their countries or connected to their public switched networks. 
This suggests that a "free market" for encryption may never exist. This could be a 
significant factor in projecting future markets. 

c. The extent to which current cryptographic policy satisfies the interests of 
privacy, public safety, national security, and competitiveness. In doing so, reviewers 
will be able to compare what the policy is doing well and what it is not. 

d. Alternatives to current key escrow implementation. Specifically address, the 

question: If the encryption algorithm resides in software, can key escrow be 

implemented with assurance that communications will be secured, and that the key 
escrow mechanism can not be bypassed? 

NRC Response AnalysisJ Cencur. The above Items will be included in the study. 


ISS Letter - Paragraph 3: The Project Content section of the SOW includes a 

provision that appears to reflect a misunderstanding of current regulations. Since 
there are no U.S. imposed restrictions on U.S. user use of encryption, here or abroad, 
query the rationale for studying the impact of restrictions on "me competitiveness and 
performance of commercial US users of such technology. 

NRC Response Anafysis: While there are currently ho restrictions on the American use 
of encryption, the impact of possible restnetfons is & matter of some comem 
within the community. ” Thus the topic will be covered in the study. 


ISS Bottom Line: The NRC has attempted to meet most of our 

However, from its response to our paragraph Id, it appears e 

house security "review procedures. " Recommend this issue be raised NRC 

in subsequentcorrespondenceand that the study not be aiiowed “ 

Lecurity procedures for this study are approved by DoD and inciuded in the SOW. 
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section 8 

:cPPL!ES OR SERVICES A,NO PRICES/COSTS 


Pursuant to Section 267 of the National Defense Author, rat, on Act 
ror fiscal Year 1994. a study snail be conducted bv the Nat,onal 
Research Council of the National Academy of Sciences (Contractor). 

The study entitled: "Comprehensive I ndeoenoent Study of Nat lona 1 

Cryptograpmc snail assess: 

(1) The effect of cryptographic technologies on: National security 

interests of the United States (kivernment. La- enforcement interests of 
the United States (kivernmeot. Commercial interests of United States 
industry. Privacy interests of United States citirens: and 

(2) The effect on commercial interests of United States industry of 
export controls on cryptographic technologies. 


item DESCRIPTION 


?JANT I Tv :J,/ 1 p^rrr 


Aa'OUNT 


0001 


‘Comorenenswe InaeoencJent Sz^cy of 
National Cryptograohic Policy*' 


^OC 


>93735. 000000 798, 735. 00 


0002 Reports and Other Deliverables 


1.00 lT 


NSP 


0002AA MEETINGS (Cormnttee, 0i ssemmat ion, ana 
Staff ) 


As Required 


NSP 


0002A8 final report (In accordance -icn the 
PRODUCT AND DISSEMINATION PLAN, as set 
forth in the Contractor’s oroDosai). 


:0TAL ESTDIATED COST: S 798,735.00 

:N0 OF SECTION 8 


DASW01-94-C-0178 


3-1 


.£-:ticn c 

:escriptiom/specs. /work statement 


:.‘;CCRPORATION OF TECHNICAL PROPOSAL 

Contracxor snail furnish the necessary personnel, materials, 
facilities, ana other suppl ies/services as soecifiea in its tecnmcal 
proposal entitled "National Cryptograpny Policy" (Onainai - cateo 
March 1994: Reviseo - dated June 1994). The tecnmcal orccosai, as 
revised, IS nereoy mcoroorateo at SECTION J, Attachment ^1. 


C-2. ENGLISH LANGUAGE DOCUMENTATION 

All Contractor-prepared material to be furnisned unaer tnis 
contract shall be written in tne English language, ana all measurements 
snail be m tne English Linear measure ana avoirauoois weignt systems. 


OASW01-94-C-0178 


C-1 


SECTION ^ 

' -GRACING AND MjftR<ING 


0.1 :'^.ETH00 OF transmission (TOP SECRET) 

Top secret material may oe transmitted oy (i) a specifically 
designated escort or courier cleared for access to TOP SECRET information 
(military, US civilian employee, or a responsible employee designated by 
the contractor, except the contractor's employee snail not carry 
Classified material across Internationa 1 boundaries) or, (ii) Armed Forces 
Courier services using a contractor assigned ARFCOS account number. Under 
no circumstances shall TOP SECRET material be transmitted through the US or 
company mail channels. 


0.2 PACKAGING AND MARKING OF CLASSIFIED ITEMS - 

(a) confidential or SECRET material will be paciceo to conceal it 
properly ana to avoia suspicion as to contents, ana to reach destination in 
satisfactory condition. Internal markings or internal oacicaging will 
clearly inoicate tne c lassi f ication. ‘,0 NOTATION TO INDICATE 
Classification will appear in external markings. \£ee paragraph 17 of the 

.ndustrial Security Manual ror Safeguaromg Classified Information, OcD 
5220. 22 -M. ) 

(b) confidential or SECRET documents will be enclosed in two (2) 

opaque envelopes or covers. The inner envelope or cover containing the 
documents being transmittec will be accresseo, return addressed and sealed. 
The classif ication of the cocwments oe-.ng transmitted will be clearly 
marked on the front ana back of the inner container. The classified 
documents will oe protectea from direct contact -itn the inner cover oy a 
cover sheet or oy folding inward. For SECRET documents, a receipt form 
identifying the addresser , addressee ana documents -ill be enclosed in the 
inner envelope. 'wONFIOENTIAL documents -ill be covered by a receipt only 
when the senoer deems it recessary, ’--e inner envelope or cover will be 
enclosed in an ooaque outer envelope cover. '-e c 1 ass i f icat ion rarkings 
or the inner envelope snou'c ret oe oetectao : e . '-e outer envelope w ; ■ ce 

addressed, return accressec ara sea'ec. ‘G ClASS I " iCA" I CN' MARKINGS «i'_L 
APPEAR On The OuTER EnvElCPE GR COvER. 


tND OF SECTION 0 


D-1 


OASW01-94-C-0178 



52 . 246-9 


-ECTICN £ 

:'.s.-ect:gn ajnd acceptance 


I.NSPECTION OE RESEARCH iNO DEVELOPMENT (SHORT FORM) (APR 1984) 
(Reference 46.309) 

E.2 . 252.246-7000 .“ATERIAL INSPECTION AND RECEIVING REPORT (DEC 1991) 

(Reference 46.370) 


E.NO OF SECTION £ 


E - 1 


0ASW01-94-C-0178 


F 

iLlvERIES Ck 


".■ :j. 247-34 ~.3.3. OESTINATIGN (NOV '99M 

(Reference ^7.303-6fc)) 

'ERM OF CONTRACT 

The term of this contract is from 30 Seotemoer 1994 through 31 M.ay 1997. 


•'•3 PLACE OF DELIVERY (CORTI. . 

All Items to be oelwereo unoer this contract snail be delivered to 
the Contracting Officer’s Reoresentat i ve (COR) at the location(s) soecifieo 
below: 


^>^r. Jeffrey R. Gaynor (OSD. Director of Informat ion Systems Security) Room 
3C-341, The Pentagon Washington, CC 20301-3040. 


REPORTS AND OTHER DELIVERABLES 


Delivery of all reoorts 
address soecifieo m Section 


and other celiveraoies snail be maae to the 
F in accordance witn the following; 


ITEM NO description 


DATE fen or Before) 


CC02AA '‘Meetings 

0C02A8 ■* mal Reoort 


4s recuireo 

In accordance with Contractor 
"echmcal Prooosai: Product 

and Dissemination Plan (p/4) 


{NO OF SE'DTICN F 
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lECTION G 

;:.';tract acministration data 


^52. 201-7000 


v-ONTRACTING OFFICER'S REPRESENTATIVE (DEC 1991) 


^a) Definition. >...ntracting officer.'s '"eoresentati ve" means an 
individual designated in accordance -itn subsection 201.602-2 of the 
^fense Federal Acquisition Regulation Suoolen^nt and authorized in writing 

by the Contracting Officer to oerform soecific technical or administrative 
functions. 

(b) If the Contracting Officer designates a contracting officer's 
representative (COR), the Contractor -.1, receive a copy of the written 
^signation It will specify the extent of the COR's authority to act on 
behalf of the Contracting Officer. The COR is not authorized to make any 
comitments or changes that will affect ^rice. quality, quantity, delivery 
or any other term or condition of the contract. 

(End of clause) 


S.2 


VOUCHERS 


(a) Vouchers. Identified by contract numoer. including delivery order 
numoer. ir applicable. w,tn supporting statements, snail be submitted for 
ew and provisional approval to the cognizant audit agency listed below: 

Place. Suite 101 Landover. 


(b) One (1) copy of each voucner snail oe mailed to the Contracting 
Officer s Reoresentati.e at tne acaress nsted below: 

3r84i^'Tnrpr =' I-'onmation Syst^s Security) Roo. 

The Pentagon wasmngron. DC 20301-3040 




i-'T -UinOPiT'*' 


CC.STRaCT AC^InISTkATION 


ihe following contracting aomi n i strat ion office 
as the authorized reoresentat i ve of the Contracting 
purpose of administering tms contract in accordance 
directives: 


IS nereoy designated 
Officer for the 
with Current 
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Office or Naval Resiaent Researcn Reoresenwrive (ONRRRl 101 Marietta 
Over, Suite 2605 Atlanta. GA 30323-0008 


G.4 


CONTRACTING OFFICER'S REPRESENTATIVE 


(a) The Contracting Officer's Reoresentati 
contract is Mr. Jeffrey fi. Gaynor (OSO. "Oirector 
Security) TELEPHONE; (703) 693-6686 Room 3C-341 
DC 20301-3040. 


ve (COR) under this 
of Information Systens 
, The Pentagon Washington, 


(b) The Contractor is advisee that only tne Contracting Officer can 
Change or mooify the contract terms or take any other action which 
00 ligates tne Government. fnen. sucn action must Oe set forth in a formal 
mooification to the contract. '-a authority =f the COR is strictly limited 
to the soeciric Cuties set rortn ,n ms/ner letter of aooointment. a cooy 
or which IS rurnisneo to the Contractor. -htractors -no rely on oirection 
from other than the Contracting Officer or a COR acting within the strict 
limits of his responsiDilities as set fortn in ms/her letter of 
appointment do so at their own risk and expense. Such actions do not bind 
the Government contractual ly. Any contractual Questions snail be directed 
to the Gsntracting Officer. 


-:n: cf section g 


G-2 
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;.=ecul contract requirements 


PAPERWORK reduction aCT 

in tne event that it seccmes necessary to collect information upon 
•centical forms from ten or more oersons other tnan federal emoloyees, tne 
Paoervork Reduction Act shall aooly to this contract, ana the contractor 
snail obtain through the COR the required OOD clearance. No funds will be 
expended or any contracts maoe for the collection of data from public 
resoondents until the contractor is given written notice by the contracting 
officer. 


military security CLASSIfICATION 


Military security requirements in tr.e oerformance of tms contract 
s-all be maintaineq m accordance -itn FAR 52.2CA-2. Security Requirements 
a.-.q the 00 form 254 containeq in Section J. >.e hignest classification 
-volved in the perrormance of this contract is TOP SECRET. Tr, is contract 
cocument is UNCLASSIFIED m a ^ • . 

j-Tiaividuais requiring access to collateral information 
ni connection with this contract: v/ill be processed for the aoDrooriate level 
of clearance through the Defense Industrial Clearance Office' (DISCO) . Cleared 
individuals will also be required to comply with all security practices, 
procedures, and regulations to pre/ent loss or compromise of classified national 
INCORPORATION Of cERTif icATioNS securlty information. 


’'’®P'‘esentations. Cert i f icat ions ano Other Statements of 
-rrerors . Section l. "Instructions. Conqitions, ano Notices to Offerors or 
-oters". ano Section m, "Evaluation factors for Awaro". aithougn withorawn 
at time of a-aro. are hereoy mcoroorateo Dy reference with the same force 
aro eftect as if stateo m full text. 


a 


special access and COMPETITIVE PROCUREMENT 


(a) Prcorietary Data of Thiro Parties. 


iH tne event tne Contractor 
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'Muesis access to oroorietary aata of otner ccmoames. in croer to conouct 
studies ana researcn unoer tre contract, •t.-in enter into agre«nents witn 
tne soooiying ccmoanies to orotect Sucn.oata from unautnonzeo use or 
oisclosure so long as sucn cata remains- croonetary. 


(b) Proprietary Data r'urnisneo Py tne Government. In the event tfie 
Contractor is given access by tne Government to proprietary aata of the 
Government or proprietary aata of tmra parties oossesseo Py tne 
Government, the Contractor nereoy agrees to orotect sucn data from 
unauthorizeo use or disclosure as long a^ Sucn aata remains oropnetary. 


H.5 


prc-contract costs 


All costs incurred on or a- ter c'. J- V. 1 994 by the contractor in 
anticipation of this contract, -men ,f i-curred after the effective date of 
this contract -ou ,o nave oeen consiaerea allowaoie costs hereunder, snail be 
allowable costs nereunoer; srov.aeo. ncwever. sucn costs shall not exceed 
$50,000.00. 


H.6 


incremental FlNOING 


This contract snail pe SuC.-ect to incrementa I f.nainc . , cn 
S $400,000.00 

presently available for performance. I; -s esti.matea that tne funds 
presently availaole are sufficient to permit tne contractor's performanc*. 
i.'^rouqn 3Q SeDtemoe^*. ' 99S 

In accorca.nce - 
* " no ' eca 1 ^ » 

neney m e*cess or $ 

snail arise unless ana until aaaiticna, f.-cs are mace available by tne 
vontracting Officer tnrougn. a ncoifipation of t-.is contract. 


-6-, _ _ 3-,ses ■•s'^inavicn a.-c ■..■m taticn ot 

'■"/ 3n ra'-t c* :*'e 'licvernment *or za-tmenz or 

s^co.ccc. :c 
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allowable costs 


1 . 7 


For the term of tms contract, tr.e. Contractor wiil 
allowable costs m accoraance witn FAR Subcart 31.2, 


be reimourseo for 


H.8 CONTRACTOR VISITS 

AC the request of the Contractor, the Contracting Officer *s Representative 
(COR) will coordinate Contractor visits to a sponsor's agency and other DoD 
agencies necessary for performance under this contract* 
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:£CTICN I 
.rCNTRACT CLASSES 


52.252-2 CLAUSES INCORPORATED BY REFERENCE (JUN 1988) 

This contract incorporates one or nx>re clauses Oy reference, with the 
same force and effect as if they were given m full text. Upon request, 
the Contracting Officer will make tneir full text available. 

(End of clause) 


1.2 52.202-1 

1.3 52.203-1 

1.4 52.203-3 

1.5 52.203-5 

:.5 52.203-7 

1.7 52.203-10 

1.8 52.203-12 

1.9 52.204-2 

:.10 52.209-6 

:.’l 52.215-1 

1.12 52.215-22 


DEFINITIONS (SEPT 1991) 

(Reference 2.201) 

OFFICIALS NOT TO BENEFIT (APR 1984) 

(Reference 3.102-2) 

GRATUITIES (APR 1984) 

(Reference 3.202) 

covenant AGAINST CONTINGENT FEES (APR 19841 
'.Reference 3.404rc)) 

anTI-<ICKBAOC PROCEDURES {OC^ 1938) 

(Reference 3.502-3) 

PRICE OR FEE ADJUSTMENT FOR ILLEGAL OR IMPROPER ACTIVITY (SEP 1990) 
'.Reference 3. 104- 10(c); 

^IMITATION ON PAYMENTS TO INFLUENCE CERTAIN FEDERAL TRANSACTIONS (JAN 
1990) 

(Reference 3.808(b)) 

SECURITY REQUIREMENTS (APR 1984) 

(Reference 4.404(a)) 


PROTECTING THE GOVERNMENT’S INTEREST ’^HEN SUBCONTRACTING WITH CONTRACTORS 
DEBARRED, SUSPENDED. CP PROPOSED FOR DEBARMENT (NOV 1992) 

.Reference 9.4C9(b)) 

EXAMINATION OF RECORDS BV COMPTROLLER GENERAL (FEB 1993) 

(Reference 15.106-1(6)) 

PRICE REDUCTION FOR DEFECTIVE COST OR PRICING DATA (JAN 1991) 

(Reference 15.804-8(a)) 
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1.13 

52.215-23 

REDUCTION FOR OEFECTWE COST OR PRICING DATA— MODIFICATIONS 
(DEC 1991) 

(Reference 15.804-8(b)) 

I. 14 

52.215-27 

TERMINATION OF DEFINED BENEFIT PENSION PLANS (SEP 1989) 
(Reference 15.304-8(e)) 

i. 15 

52.215-30 

FACILITIES CAPITAL COST OF MONEY (SEP 1987) 
(Reference 15. 904(a)) 

1.16 

52.215-33 

ORDER OF PRECEDENCE (J4n 1986) 
(Reference 15.406-3(b)) 

1.17 

52.215-39 

SEVERSION OR ADJUSTMENT OF PLANS FOR POSTRETIREMENT BENEFITS OTHER THAN 
PENSIONS (PRB) (JUL 1991) 

(.Reference 15.904-8(f)) 

'.'6 

52.216-7 

41.LCWABLE COST AND PAYMENT (Jll 1991) 
•Reference i 6. 307(a)) 

1.19 

52.216-11 I 

COST CONTRACT--.no FEE (APR 1 984 )--alTERNATE I (APR 1984) 
(Reference 16.307(e)(2) 

1.20 

52.216-15 

predetermined indirect cost rates (APR 1984) 
(Reference 16.307(i)) 

1.21 

52.222-26 

equal opportunity (APR 1984) 
(Reference 22.310(e)) 

:.22 

52.222-35 

affirmative action for SPECIAL DISABLED AND VIETNAM ERA VETERANS 
(APR 1984) 

( Reference 22. 1 3CS( a )( j 

; . 23 

52.222-36 

affirmative action for rANDICAPPED VORKERS (APR 1984^ 
Reference 22.IACS(a)/ 

1.24 

52.222-37 

employment reports ON SPECIAL DISABLED VETERANS AND VETERANS OF THE 
VIETNAM ERA (JAN 1963) 

(Reference 22.1308(b)) 
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1.25 52.223-2 

1.26 52.223-6 

1.27 52.227-14 

1.28 52.227-21 

1.29 52.230-3 


CLEAN AIR AND WATER (APR 1984) 

(Reference 23.105(b)) 

DRUG-FREE WORKPLACE (JUL L990) 

(Reference 23.505(b)) 

RIGHTS IN OATA--GENERAL (JUN 1987) 

(Reference 27.409(a)(1) 

TECHNICAL DATA CERTIFICATION, REVISION, AND WITHHOLDING OF PAYMENT- 
.^AJOR SYSTEMS (JUN 1987) 

(Reference 27.409(a)) ^ 

DISCLOSURE AND CONSISTENCY OF COST ACCOUNTING PRACTICES (AuG 1992) 
(Reference 30. 201 -4( b) ) 


1.30 52.230-4 


CONSISTENCY IN COST ACCOUNTING PRACTICES (AU'G 1992) 
(Reference 30. 201 -4<' c ) ; 


ADMINISTRATION OF COST ACCOUNTING S^^ANOARDS (AuG 1992) 
(Reference 30. 201 ) ) 


1.32 52.232-9 LIMITATION ON WITHHOLDING OF PAYMENTS (APR 1984) 

(Reference 32.111(c)(2) 

1.33 52.232-22 LIMITATION OF FUNDS (APR 1984) 

(Reference 32.705-2(c)) 


1.34 52.232-23 ASSIGNMENT OF CLAIMS (JAN 1986) 

(Reference 32.806(a)(1) 

1.35 52.232-25 PROMPT PAYMENT (MAR 1994) 

( Reference 32 . 9G8( c ) ) 


:.35 52.232-28 


ELECTRONIC FUNDS T = mNSF£R '~RR '?89) 

; Re fe rence 32 . 903 ( d ; ; 


1.37 d2, 233-1 I DISPUTES (MAR 1 994 )--Al TERNATE ; (l)£C 1991) 

(Reference 33.215) 

1.38 52.233-3 I PROTEST AFTER Av^ARD ( JLN 1 985 ) --ALTERNATE I (JUN 1985) 

(Reference 33.106(b)) 


:-3 
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1.39 52.242-1 .NOTICE OF INTENT TO OISALlOW COSTS (APR 1984) 

(Reference 42.802) 

1.40 52.243-2 V CHANGES— COST-REIMBURSEMENT (AUG 1987)— ALTERNATE V (APR 1984) 

(Reference 43.205(b)(6) 

1.41 52.246-25 LIMITATION OF LIABILITY— SERVICES (APR 1984) 

(Reference 46.805(a)(4) 

1.42 52.249-5 TERMINATION FOR CONVENIENCE OF THE GOVERNMENT (EDUCATIONAL AND OTHER 

NONPROFIT INSTITuTIONSr (APR 1984) 

(Reference 49.502(d)) 

1.43 252.203-7000 STATUTORY PROHIBITION ON COMPENSATION TO FORMER DEPARTMENT OF DEFENSE 

employees (DEC 1991) 

(Reference 03.170-4) 

1.44 252.203-7001 SPECIAL PROHIBITION ON EMPLOYMENT (APR 1993) 

(Reference ) 

T.45 252.203-7003 PROHIBITION AGAINST RETALIATORY PERSONNEL ACTIONS (APR 1992) 

V Reference 03. 7^08 ) 

1.46 252.215-7000 pR ICING ADJUSTMENTS ( DEC ‘ ?91 ) 

(Reference 15.804-0(1)) 

1.47 252.223-7004 DRUG-FREE WORK FORCE (SE? 1988) 

(Reference 23.570-4) 

1.48 252.227-7018 RESTRICTIVE MARKINGS ON TECHNICAL DATA (OCT 1933) 

(Reference 27.403-72(a) 

1.49 252.227-7029 IDENTIFICATION OF TECHNICAL DATA (AAR 19S8) 

'Reference 27 . a 03-72( a ) 

^"'4.227-/0 aO • c. wHN 1 Ca l 0 a i - r» t I D , jF PA ym^ n t ( CCT 1 9 S3 ) 

(Reference 27. AC3- 74(b) 

1.51 252.227-7037 VALIDATION OF RESTRICTIVE “ARKINGS ON TECHNICAL DATA (APR 1988) 

(Reference 27. 40 3- 7 3(a) 
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:.S2 252.231-7000 ioPPLEMENTAL COST PRINCIPLES (DEC 1991) 

(Reference 31. 100-70) . 

1.53 252.231-7001 PENALTIES FOR UNALLOWABLE COSTS (MAY 1994) 

(Reference i 

I. 54 252.232-7005 REIMBURSEMENT OF SUBCONTRACTOR ADVANCE PAYMENTS— CXDO PILOT MENTOR-PROTEGE 

PROGRAM (DEC 1991) 

(Reference 52.412-70(c) 

1.55 252.233-7000 CERTIFICATION OF CLAIMJ“anO REQUESTS FOR ADJUSTMENT OR RELIEF (MAY 1994) 

(Reference ) 

1.56 52.203-9 REQUIREMENT FOR CERTIFICATE OF PROCUREMENT INTEGRITY— MODIFICATION 

(NOV 1990) 

(a) Definitions. 7-e aefimtions set fcrtn m FAR 3.104-4 are nereoy 
•• ncoroorateo in cms ciause. 

(b) The Contractor agrees tnat it wiii execute the certi f ication set 
forth in paragraph (c) of this clause when recuested by tne Contracting 
Officer in connection with the execution of any nx5d if ication of this 
contract. 

(c) Certif ication. As reouired m paraaraon (b) of this clause, the 
officer or employee responsible for tne moaif ication proposal shall 
execute the following certi f ication: 

CERTIFICATE OF PRXUREMENT INTEGRITY. -MODIFICATION (NOV 1990) 

(^) Ii [ Name of certifier] am the officer or 

employee responsible for tne preparation of this modification proposal 
and hereby certify cnat. to tne best of r.y Knowledge and belief, with 
tne exception of any information oescnoec m tnis cert i f ication, I have 
no information concerning a violation or possible violation of 
subsection 27(a). (b), (a) or ft) of the Office of Federal Procurement 
Policy Act, as amended^ (41 U.S.C. 423), {hereinafter referred to as 
the Act ). as imoiemented m tne FAR. occurring purino the concuct of 

tms procurement ' co.htract and modification r.umoer;. 

(2) As reouired by subsection 27(e)(l)(3) of the Act, I further certify 
that to the best of my Knowledge ano oenef, eacn officer, employee, 

agent, representat i ve, ana consultant of 'Name 

of Offeror] who has participated personally ana substantially m the 
preparation or submission of this proposal nas certified that he or she 
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s familiar witn, ana will como'iy with, zr.e reoui rements of subsection 
27(a) of the Act, as implementea in tne fAH, ana will reoort immeoiately 
ID me any mformat ion concerning a violation or possible violation of 
Subsections 27(a), (b), (d), or (f) of zne Act. as imoiemented in the 
pertaining to this procurement, 

(3) Violations or possible violations; (Continue on plain bond paper 
if necessary and label Certificate of Procurement Integn ty--Hodif ication 
(Continuation Sheet), ENTER "NONE" IF NONE EXISTS) 


[Signature of the officer or employee responsible for the modification 
proposal ano date) 


•.Typed name of the officer or employee responsible for tne modification 
sroposa 1 ) 

- Subsections 27(a), (b), ana (d) are effective on December 1, 1990. 
Subsection 27(f) is effective on June 1, 1991. 

THIS CERTIFICATION CONCERNS A MATTER WITHIN THE JURISDICTION OF AN AGENCY 
OF THE UNITED STATES ANO THE MAKING OF A FALSE, FICTITIOUS, OR FRAUDULENT 
CERTIFICATION MAY RENDER THE MAKER SUBJECT TO PROSECUTION UNDER TITLE 18, 
UNITED STATES CODE, SECTION 1001. 

(End of certification) 

(d) In making the certi f icat ion in paragrapn (2) of the certificate, tne 
officer or employee of the competing Contractor responsible for the offe'r 
cr Old, may rely upon a one-time cert i f icat ion from each individual 
recuired to submit a certi f ication to tne competing Contractor, 

Supplemented by periodic training. These certi f ications shall be 
obtained at the earliest possible date after an individual reouired to 
certify begins employment or association witn the Contractor. If a 
■-cntractor decides to rely on a certification executed prior to the 
s-spension of section 27 (i.e.. prior to wecemoer 1, 1999), zne Contractor 
s^ail ensure that an individual -no nas so certified is notified that 
section 27 has been reinstated. ^■'ese certifications snail oe Tiaintaineo 
cy tne Contractor for a period or 6 years from tne date a certifying 
employee’s employment with the company encs or, for an agency, 
neoresentat 1 ve, or consultant, 6 years frcn tne date sucn individual ceases 
to act on behalf of the Contractor. 

'e) The cert i f icat ion reouireo Oy paragrapn (c) of tnis clause is a 
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•Tiatenal representation of fact upon wmcn reliance will be placed in 
executing this moo i f i cat i on . 

(End of clause) 


1.57 52.215-2 II AUDIT— NEGOTIATION (FE3 1993)— ALTERNATE II (FEB 1993) 

(a) Exa/nination of costs. If this is a cost-reimbursement, incentive, 
time-and-matena Is, labor-hour, or price- redeterminaole contract, or any 
comoi nation of these, the Contractor snail maintain--and the Contracting 
Officer or representatives of the Contracting Officer shall have the right 
to examine and audit — books, records, documents, and other evidence and 
accounting procedures and practices, regardless of form (e.g., machine 
readable media such as disk, tape, etc.) or type (e.g., data bases, 
applications software, data base management software, uti 1 i ties, etc. ), 
sufficient to reflect properly all costs claimed to nave been incurred or 
anticipated to be incurred in performing tms contract. This ngnt of 

- examinations snail include inspection at a 1 1 reasonaole times of the 

Contractor s plants, or parts of them, engaged in oerforming tne contract. 

(b) Cost or pricing data. If. pursuant to law, the Contractor has been 
required to submit cost or pricing data in connection with pricing this 
contract or any modification to this contract, the Contracting Officer or 
representat 1 ves of tne Contracting Officer who are employees of the 
Government shall have the right to examine and audit all of the 
Contractor’s books, records, documents, ano other data regardless of form 
(e.g., macmne readable media sucn as disk, tape, etc.) or type (e.g., data 
bases, applications software, data base management software, utilities, 
etc.), including computations ano projections, related to proposing, 
negotiating, pricing, or performing the contract or modification, in order 
-o evaluate the accuracy, completeness, and currency of the cost or pricing 
data. The right of examination snail extend to all documents necessarv to 
permit adequate evaluation of the cost or pricing cata submitted, along 

- ' th the computations ano projections used. 

.c) Reports. if the Contractor is reouireo to fumsn cost, 'unaing, pr 
performance reports, the Contracting Officer or representat i ves of tne 
'..ontract 1 ng Officer who are employees of the Government shall have the 
right to examine and audit boons, records, ctner doc-ments, ano supporting 
materials, for tne purpose of eva»uatina (^1) tne ef feet i veness of the 
Contractor s oolicies and procedures to produce data compatible with the 
objectives of these reports ano (2) the data reported. 
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:c) Avai.labi Hty. 7he Contractor snail mane available at its office at 
all reasonaole times the materials cescnoeo m oaragrapns (a) ano (b) 
aoove, for examination, auoit. or reproouction, until 3 years after final 
payment under this contract, or for any snorter period specified in Subpart 
4.7. Contractor Records Retention, of the Feoeral AcQuisition Requlation 
(FAR), or for any longer penoo reauirea oy statute or oy other clauses of 
this contract. In addition — 

(1) If this contract is completely or partially terminated, the 
records relating to the work terminated shall be made available for 3 
years after any resulting final termination settlement: and 

(2) Records relating to appeals under the Disputes clause or to 
litigation or the settlement of claims arising under or relating to this 
contract shall be made available until sucn appeals, litigation, or 
claims are disposed of. 

(e) Except as otherwise proviaeo in FAR Suboart 4.7, Contractor Records 
Retention, the Contractor may transfer computer data in machine readable 
form from one reliable computer 'r^eoium to another. The Contractor's 
computer data retention ana transfer' oroceoures snail maintain the 
integrity, reliability, ana security of tne original data; The 
contractor's choice of form or type of materials described in paragraphs 
(.a), (b), and (c) of this clause affects neither the Contractor's 
obligations nor the Government's rights unaer this clause. 

(f) The Contractor snail insert a clause containing all the terms of this 
clause, including this paragraph (f), m all subcontracts 

under this contract that are over the small purchase limitation in FAR Part 
13, altering the clause only as necessary to identify properly the 
contracting parties and the Contracting Officer unaer the Government prime 
contract. 

(g) The provisions of 0MB Circ.;ar No. A--33 "Audits of Institutions of 
Higher Learning ana Other Nonprofit I nst : twtions" apply to this contract. 

(£na of c;a-se/ 


I. S3 52.242-13 BANKRUPTCY (APR 19911 

in the event the Contractor enters into proceedings relating to 
bankruptcy, whether voluntary or involuntary, tne Contractor agrees to 
furmsn. Py certified mail, written notification of the bankruptcy to tne 
Contracting Office responsible for aamimstenng the contract. This 
notification shall be furnished witmn five days of the initiation of the 
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::roceedings re»ating to bankruotcy r ’ll mg. "his notification snail 
■ nclude the cate on wmcn the Dankrootcy o^tition was tiled, the identity 
of the court in which the bankruotcy petition was filed, ana a listing* of 
Government contract numbers and contracting offices for all Government- 
contracts against which final payment nas not been made. This obligation 
remains in effect until final oayment unoer this contract. 

(End of clause) 


1.59 252.204-7003 CONTROL OF GOVERNMENT PERSONNEL WORK PRODUCT (APR 1992) 

The Contractor’s procedures for protecting against unauthorized 
disclosure of information shall not require Department of Defense employees 
or memoers of the Armed Forces to relinquish control of their work 
products, whether classified or not, to the Contractor. 

:’End of ciause) 


•:no of section i 
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SECTICfJ J 

,:ST OF ATTACHMENTS 


J-1. LIST OF DOCUMENTS, EXHIBITS, AND OTHER ATTACHMENTS 

The following aocuments, exmoits, ano otner atta^rwrients, wmch are 
'oentifieo by Attachment Numbers in tms Section J. abply to and are a 
part of tms contract. 


ATTACHMENT 

It) 

n 


pages 

Contractor’s Technical Prooosal 5 

(NAS Proposal No. 94-CPSMA-l 54) 

Contract Security Classification Soecif fcation ^ 

(00 FORM 254) 


^3 Section 267. National Defense Authorization 

Act of Fiscal Year 1994 


#4 


Agreement to Estaolisn tne Allowaoiiity or 
Pre-Contract Costs 


END OF SECTION J 
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national academy of sciences/national academy of engineering 

NATIONAL RESEARCH COUNCIL EERINO 

Commission on Physical Sciences. Maihemancs. and Applications 
Computer Science and Telecommunications Board 


National Cryptography Policy 
(Original dated: March 1994) 
(Revised dated; June 1994) 


PROJECT SUMMARY 

involving '’sensitive or ciSsiHed™ foTOarton'‘'tL't^^ appHcaions 

AS pan of th.'Lf.itse AurnSi^'^forFY 

from the National Research Council rNRCI a cnmnr»ha.fie j efense is asked to request 

national cryptography policy. This study is exoected tn hh* *^^^°8raphic t^hnologies and 

the various .nteJts d«criL ab^ a ? T""" policy balance among 

options for balancing 

and anticipated in L fumrl. ^«^t|eva^t^r^L^ technologies known mday 

shortcomings in the federal process throueh which purposes; and possible strengths and 

formulated as well as recTrume^^Lslr^nin!^^^^ cryptography policy has in fact been 

study committee of approximately 16 members will include cryptographic policy in the future. A 

technology; cryptographic technologies and cryptanalysis* foreLI^MtiM^’’*^**'^ communications 
affairs; law enforcement* science noliev r . ^ national security, and intelligence 

technology (hardware ^d software vendor! business dimensions of computer 

pnvacyS:iLillibertieT -titeres^ in 

boards; members of lOM, NAS, and NA£; and other experJ. * NRC oversight 

ORIGIN AiND BACKGROUND 

mvoTv°r;3=LE:''’o?^^^^ Wllca„oas 

addidon Cyptogmphy is attJ romZI o? T -^'^cteurn. In 

guarantee the identity of a message’s sender N^iTnar^*^T'^^T ' «■’ technologies to 

for future U.S. economic comoetidveness natmnal ography policy has important implications 

on Ae protection of the r,“p 'va“ 

5rg*;::r:^m::t'7nts^t^^^^^ 

communications as well as its needs to eathw fnteHi!Il classified and other sensitive 

would benefit from U.S. superiority in crvDtomnhic^r*if security purposes, needs that 

motivated such actions as development ofervoto^nh T ^ ° security concerns have 

ciopment of cryptographic technologies, development of countermeasures 
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m«r«s,, and nauonal .ecumy ,a no longor ,he sola policy driver for ,his class of tcchnotogy 

A major development m the past ten years has been what could hd* r.iu^ au 

cryptography. First, some industries-notably financial seivices-have com,, f Populanzation of 

encrypnon for pro.ccuon of propne^^ ™rd‘’',’:''r^“ " 

compeers and comparer nertorThas gen^r^S r d?rd%^'t 

comiidntcanons down lo the level of individnal citiiens and assure the privacy Md s^,|.l „f?c“^ 

electronic records and transmissions Fnnrth rh^ j ^ ^ ^ security of their 

(d.g, cellular «lcphcnes, ^ h hllghTihfhS^^^^^^ 

unaudionzed intercep, as well as dtl im^sslbilify oS^ecItag^Tn.^^^^^^^ comntun, canons ,o 

fi“:r ror:sTa.°ZueTTa“^^^^ 

Attempting to balance these concerns, the Clinton Administration proposed on April 16 1993 the „,e 
esc “ beLp^lenter^ed w'irt « 4 

.S based on an electron.c mSocilcurongri y ^ 

databases that would hold the cryptograpL kevs nJ^ss^r^ ^o^d restricted-access 

j. cu,„, 

As part of the Defense Authorization Bill for FY looa fK* c- r rs r 

comprehensive study from the National Research Cn ’ ^ Defense is asked to request a 

cryptography policy ^ ^ ^ cryptographic technologies and national 
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PROPOSED ACTIVITY 


Project Conieiil 

It is expected that the study will address: 

.tchnotogy on for cryptographic 

+ the availability of such technology to foreign and domestic panics with interests hostile 
to or competitive with the national security, economic, commercial, and privacy 
interests of the U.S. government, U.S. industry, and private U.S. citizens. ^ 

* of U^S. manufacturers of such technology in the intertiational 

r the competitiveness and performance of commercial U S. users of such technology. 

+■ U.S. national security and law enforcement interests; 

the strength of various cryptographic technologies known today and antic.oated in the future that 
are relevant tor commercial and pnvate purposes; 

current and anticipated demand for information systems security based on cryptography; 

’ M imi rr ““ '"■Porat'O" of. and the market for cryptographic 

A 

the extent to which current cryptography policy is adequate for protecting U.S interests in 
pnvacy, public safety, national security, and economic competitiveness; 

technical strengths and weaknesses of current key escrow implementation schemes; 

l^w technology now and in the future affects and will affect the feasible policy options for 
balancing the national secunty .and law enforcement interests of government and the pnvacv and 
commercial interests ot U.S. industry and private U.S. citizens; 

recommendations for the process through which national secunty. law enforcement, commercial 
and pnvacy interests are balanced in the formulation of national cryptography policy. 

Project Structure 

CSTB will assemble a committee of approximately 16 members that will include expertise in computer 
and communications technology; cryptographic technologies and cryptanalysis; foreign national 
secunty. and intelligence affairs; law enforcement; science policy; trade policy; commercial and business 
dunensions of computer technology (hardware and software vendors, users of cryptographic 
technologies); and interests in pnvacy and civil liberties. Nominations for the committee will be sought 
from relevant oversight boards; members of lOM, NAS, and NAE; and other experts. ^ 
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To complete the study, the project plan calls for six chree-day meetings of the full comminee anH r,fh» 
meetings ot sub-committees as appropriate. ^ other 

It is «p«tcd that this study will ttqutre tha handlina of sensitive and hiuhlv classified ief» 
extra time and staff effort has been planned to accomm'odate this fact. A sublet of thrl|5T ' 
will e Cleared at the SimC level and have access to all relevant infotmtldn Tet Je thauL^^^^^^^^^ 
conclusions, and recommendations of the unclassified report are consistent with what is irnn " ^ 
classtfied world. Access to classified data is understood to be conZ^t on^ 

of “"""i"" "’Albers and staff and^L eSon 

of non-disclosure agreements by those individuals. execution 

^e National Ac^emy of Sciences has prepared and maintains a Standard Practice Procedures fSPPl 
Manua^ that .mplements the requimments of the DoD Industrial Security Manual (ISM) TOe SPP 
m^ual has been tevtewed and approved by ,he Defense lnves.tga.tve Ser^ce. The smo/wilUonfoL 
to all requirements and procedures spectfted in the SPP manual ntlated m classified infomtatian 

S dd'ihlemtionT TdJa Preparation. After the committee has completed 

IB deltberations. s dr^ re^rt will be prepared and revised in accordance with committee direction 
This draft report will be submitted internally within the NRC for review fsee balow^ Afl-Ar »h 

After NRC editing which ,s a major step ,n the repon preparation process, dte report w,H b^Lt^Tfor 
transmttal to the Defense Deparimeni for secunty review. All n^essary redacLs J I be mi. m 

me repori by the NRC. after which the report will b. ttansmined toT Sc“r^^^ o Deirsfand 
dissemination activities will begin as desenbed below. ' uetense and 

PRODUCT AND DISSEMINATION PLAN 

In accordance with Public Uw 103-160. the Defense Authoriaalion Bill for Fiscal Year 1994 the 
rS'foll “ “ ^ the study will be delivered to the Secretary of Defense approximately two years 

K yr ’’ r"""- «=« »0'K «f t«udy wm be M^teTed 

about 18 to 20 months after execution of the award instrument for funding the study. 

The final report of the study comminec would be subject to NRC review procedures It is the intent 

mnexes as necessary. The NRC review procedures will ensure that only individuals with aoproonate 
necesSry^ "" 4^n«es be 

r?vV:renlmia?ct"sl^^^ the Dep^men. cf Defense prior ,o publication in final form for sccunty 

tha WO divs after L ^at o h T,!, ™ The governing statute provides 

hat 120 days after the day on which the report is submitted to the Secretary of Defense the Secretary 

fnL' SeZ H r Services, Ihtelligence,7ommerce, an*d the JuZcl^ 

of the Senate and House of Representatives m unclassified form, with classified annexes as necess^ 

It IS expected that when the Secretary submits the report to Congress, the NRC would hold a oress 
conference to discuss the unclassified version of the report. In accordance with the Academy’s broad 
charge to diBcminat. iB work widely so aa to promo., a more infonn«i public discussion oTth. issu« 
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rci^ Z> 

rmil^pubh^^ discuss.ons 

rypica' for all major NRC repons. ^ ^ °° dissemination efforts are 


Presidential Executive Order I7sr? nf r,.,' 
established the National Research Council ^RCUeaffiJine 

the U.S. Government. Of particular relev^ce to this nrooL^*^ the NRC’s relationship with 

to disseminate to duly accredited persons and th#. n ki- ^ u ’ E^®c“tive Order directs the NRC 

gathers and collates. Further, the aLal expense of such Vn VT n ‘f technical information it 
grants-in-aid and contracts by executive deoartmenr« a a shall be paid to the Academy through 
award by a department or agLy of Sle 0 ”^^' accep Jce of!!! 

and spirit of the Executive Order which provides the fia!J.ew"i''°"*t“^" adherence to the letter 
Government are expected to interact The^«ivp " framework within which the NRC and the 

contractors do not become prime or sub«antial so^rcw of intend that 

Executive Order requirement that the NRC disseZ?,? ,/ or agencies. The 

or substantially for the puqtose of harg surrmlgs nnrd1s;\^^^^^^ !f 
and therefore ouuide the limitations of the printine and hindino i department or agency 

the attached estimate of costs is an amount projecL » cover the costT' 

activity. ^ J ° the cost of reproducing reports for this 


expenditures and sources of funds 


The estimated cost of this thirty- 
Department of Defense. 


two month activity is S798.735, which 


is being requested from the 
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DtPARTMENT 0 :FENSE 

CONTRACT SECURITY CLASSIFICATION SPECIFICATION 

(Thm requinmmntM of tho DoD InduMtrioi Soeuritv Msnuoi of>piy 
to Moeurity mspocts of thio mffortj 


: 2. THIS SPECIRCATION IS FOR: OC arxt comofn m* j 3. THIS SPECIRCATION IS: (X and comotatm mooUcatiai 


X 

PRTME CONTRACT NUMBER i ^ 1 

DASW01-94-C-0178 i X 1 •• original /C omodia data a? a^fcaaad 

Data (YYMMDOI 

940929 


b. SUBCONTRACT NUMBER 


b. REVISED fSUoaraadas 
alt oraviooa spacsl 

Reviaion No. 

Data tYYMMDO! 


c. S0UCITAT10N OR OTHER NUMBER 

Qua Data iyYMMDD) 


c. FINAL fComplata tram 6 in aU easasl 

Data tYYMMDD) 


4. IS THIS A FOLLOW-ON CONTRACT? | YES ; X | NO. If Yas. compiata tha foUowing: 


1 . CLEARAf 


\ND SAFEGUARDING 


rAClLlTY CL- .^C£ REQUIRED 

TOP SECRET 

level of safeguarding required 

SECRET 


Ctmifwd racaivad or o«naratad undar 


5. IS THIS A FINAL DO FORM 2547 


YES 


NO. 


tPracading Contract Numbarrt is transtarrad ro xNs fodow-on contract* 


If Yet. compiata tha followino: 


In raaoonM to t^a eoncraetbr't raquatt datad , raianaen at tha idamifiad dataifiad matand it auchortaad for tha oahed of 


6. CONTRACTOR (fnctude Commeremt mnd Government Entity fCAGE) Code) 


a. NAME, ADDRESS. AND ZIP CODE 

National Academy of Sciences 
P. O. Box 57062- West End Station 
Washington, DC 20037 

b. CAGE CODE 

5B946 

c. COGNIZANT SECURITY OFFICE (Name, Addrasa, and Zip Code) 

DIS, Director of Industrial Security 
25 South Quaker Lane 
Room 23 

Alexandria, V A 22314 

7. SUBCONTRACTOR 

a. NAME. ADDRESS. AND ZIP CODE 

b. CAGE CODE 

c. COGNIZANT SECURITY OFFICE (Name, Address, and Zip Code) 

8. ACTUAL PERFORMANCE 

a. LOCATION 

b. CAGE CODE 

c. COGNIZANT SECURITY OFFICE {Name, Address, end Zip Code) 


9. GENERAL IDENTIFICATION OF THIS PROCUREMENT 


In connection with the 1994 Defense Authorization Act, the National Academy of Sciences' Computer Scienc 
and Telecommunications Board will undertake a Congressionally Mandated Study entitled Comprehensive 
Independent Study of National Cryptography Policy 


10. THIS CONTRACT WILL REQUIRE ACCESS TO; 

YES 

NO 

.... _ ..._ 

11 

IN PERFORMING THIS CONTRACT, THE CONTRACTOR WILL: 

YES 


a. 

COMMUNICATIONS SECURITY (COMSEC) INFORMATION 

X 


«. 

HAVf ACCESS TO CLASSIFICO MfORMATION ONLY AT AMOTHER CONTRACTOR S 
FACIUTV OR A GOVERNMENT ACTIVITY 



b. 

RESTRICTED DATA 


X 

b. 

RECEIVE CLASSIFIED DOCUMENTS ONLY 

■1 

1 

c. 

CRITICAL NUCLEAR WEAPON DESIGN INFORMATION 


X 

c. 

RECBVE AND GENERATE CLASSinEO MATERIAL 

X 

I 

d. 

FORMERLY RESTRICTED DATA 


X 

d. 

FABRICATE. MODIFY. OR STORE CLASSIREO HARDWARE 



e. 

INTELUGENCE INFORMATION: 



a. 

PERFORM SERVICES ONLY 



(1) Sanaitiva Compartmamad Information ISCl) 

o 


1. 

HAVE ACCESS TO U.S. CLASSIREO MEORMATION OUTSlOE THE U.S.. 
PUERTO RICO. U.S. POSSESSIONS AND TRUST TERRITORIES 



(2) Non'SCI 

a 


9- 

S£ AUTHORIZED TO USE THE SERVICES OF DEFENSE TECHNICAL INFORMATION 
CENTER (OT10 OR OTHER SECONDARY DISTRI8UTION CENTER 

X 


F 

SPECIAL ACCESS INFORMATION 

X 


h. 

REQUIRE A COMSEC ACCOUNT 

X 


D 

NATO INFORMATION 


X 

}. HAVE TEMPEST REQUIREMENTS 



D 

FORQGN GOVERNMENT INFORMATION 


D 

j. HAVE OPERATIONS SECURITY (OPSEC) REQUIREMENTS 



i. LIMITED DISSEMINATION INFORMATION 

X 



BE AUTHORIZED TO USE THE DEFENSE COURIER SERVICE 



i- 

FOR OFRCIAL USE ONLY INFORMATION 

D 

Hi 

1, 

OTHER fSpacdy) 



k. 

OTHER (SoacifY) 
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Mt boo boon ooorov o d for txjbfic t 
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1 3. SECURITY GUIDANCE. Tho ooovity daoadieobon ouMfanoo noodod for thio doooifiod offort io idomrfiod bolow. If any diHieufty io oncoimored in aodying thio Quidanco or if any otnor 
contnbudrm factor mdicaioa a nood for c hange n thio ouidaiKo. tho contractor la authonxod and orKouragod to proyido rocommondod ehangoo; to challongo tho gviidanco or tho daooificaticn 
asaignod to any information orm«oriaf fumiahod or gonoratod undor thia contractr and to aubmit any Quoattona for imorprataocn of this gtadvwo to tho offtdal idoncifiod bolow. Pendir^ find 
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forward undor moormto cofroopendoneo, any doeumonra/ouidoa/OM traera roforoneod hormin. Add oddidonai oogoa aa noadod to p rovido comoioto guidonco.t 


See attached continuation sheets. 


1 4. ADDITIONAL SECURITY REQUIREMENTS. Reourwiwnn. m Momon le ism rMur«iMnt«. V. aiMMiwiM tor imo eontroct. tH Yea. nlentily the 
peronont conrractuot dot/aaa at tho contract doeumont naoff. or orov$do on oooroonoto atatomont whtch tdonofioa tho adottionoi rooutroenonta. Provtdo 
j COPY of mo rootarofnonta fo tho eognaant aoeunty off/co. Uso ttom 13 if sddihonof aooeo $a noododj 


15. INSPECTIONS. Elomonta of thia comract ara outaido tho inopoction reoponoibitity of tho cogmzam oocurity offico. Uf Yoa. oxptom and tdondfY aooafie 
arooa or ofomonta eanrod out and tho acthrity roaoonatbto for maoocdona. Uso ftam f3 if addhionat stmco is noodod.f 


16. CERTIFICATION AND SIGNATURE. Security requiremenu stated herein are complete and adequate for safeguarding the classified 
information to be released or generated under this classified effort. All questions shall be referred to the official named below. 


a. TYPED NAME OF CERTIFYING OFFICIAL I b. TITLE T tpi pmokip /m. 


TELEPHONE Unciude Area Code 


H. W. SHATTO, JR. 


d. ADDRESS Unciuda Zip Codei 

Defense Supply Service-Washing ton 
5200 Army Pentagon 
Washington, DC 20310-5200 


SIGNATURE 


Contracting Officer 


(703) 614-4579 




17. R EQUIRED DISTRIBUTION 

X •• CONTRACTOR 

b. SUBCONTRACTOR 

X c. COGNIZANT SECURITY OFRCE FOR PRIME AND SUBCONTRACTOR 

d. U.S. ACTIVITY RESPONSIBLE FOR OVERSEAS SECURITY ADMINISTRATION 

X ADMINISTRATIVE CONTRACTING OFFICER 

f. OTHERS AS NECESSARY 


CONTINUATION SHEET 01 of 03. DD FORM 254 
issued under Contract No. ^-^swoi-94-c-ol/8 


Use and designation of Type C Consultants in accordance with paragraph 2-1 11c, Industrial 
Security Manual for Safeguarding Classified Information (ISM), DoD 5220.22-M, is 
authorized under this Contract. 

10a. Communications Security (COMSEC) Information. Secure Telephone Unit 
(STU) STU III only COMSEC Account is necessary. Access to classified COMSEC 
information requires a special briefing and a final U.S. Government clearance at the 
appropriate level. 

lOe. INTELLIGENCE INFORMATION: Sensitive Compartmented Information 
(SCI). The Cognizant Security Office (CSO) identified in Block 6c is relieved of inspection 
responsibility for SCI. but is responsible for inspections of non-SCI in the possession of the 
prime contractor. Access to intelligence information requires a final U.S. Government 
clearance at the appropriate level. 

This contract requires access to SCI. The CNR SSO (Mrs. Jane Klug) has exclusive 
responsibility for all SCI material released to or developed under this contract. Access to 
SCI is limit^ to that at a U.S. Government SCIF or other contractor SCIF. DIAM 50-5 and 
DoD 5105 series provides the necessary guidance. No contractor personnel will be granted 
access to SCI material under this contract unless they are filling an SCI billet. The 
contractor will coordinate with the SCI Contract Monitor to ensure adequate billets are 
requested under this contract. Multiple contract participants sponsored by organizations other 
than CNR SSO must be permanently certified to the CNR SSO for use on this contract. The 
contractor will designate a Special Security Point of Contact (POC) to the CNR SSO. The 
POC will be responsible for all personnel and information security transactions between the 
contractor and CNR SSO. The security classification guides for SCI are DoD 
TS-5105.21-M2-I-M3 and DoD TS-5005.21-M-3. The contractor must restrict access to all 
classified information only to those individuals who possess the necessary security clearance 
and who are actually providing services under this contract. Further dissemination of SCI to 
other contractors, subcontractors, or other government agencies, private individuals or 
organizations, is prohibited unless authorized in writing from the releasing agency. 

• These supplementary requirements will be provided to the Contractor by the 

CNR SSO. 

• SCI support of this contract is under the exclusive responsiblity of the 

designated SSO and will be identified to the appropriate DIS Security Office by the 

Special Security Point of Contact. 


CONTINUATION SHEET 02 of 03, DD FORM 254 
issued under Contract No. DASW0l-94-c-0l78 


• SCI will not be released to any activity or person of the contractor’s 
organization not directly engaged in providing services under the contract, or to 
another contractor (including subcontractors), government agency, private 
individual, or organization without specific release approval of the originator of the 
material, as outlined in governing directive, and prior approval and certification of 
"need-to-know" by contract monitor. 

• SCI will not be released to foreign nationals or immigrant aliens who may be 
employed by the contractor, regardless of the level of their security clearance. 

• Names of contractor personnel requiring access to SCI will be submitted to the 
CNR SSO for approval. CNR SSO will submit request(s) for Single Scope 
Background Investigations in accordance with the Industrial Securitv Manual. 

• SCI data and material will be stored and maintained only in properly 
accredited facilities. Under no circumstances will SCI be furnished to the 
contractor’s facility. 

• Inquiries pertaining to classification guidance regarding SCI will be directed to 
the CNR SSO. 

• The contractor will not use references to SCI access, even by unclassified 
acronyms, in advertising, promotional efforts, or recruitment for employees. 


INTELLIGENCE INFORMATION SHEET 

• Intelligence information does not become the property of the contractor and 
may be withdrawn at any time. Upon expiration of the contract, all intelligence 
released and any material using data from the intelligence will be returned to the 
contracting officer for security matters, or authorized representative for final 
disposition. Only with prior authorization may the contractor retain such material. 

• The prime contractor will not release the intelligence material to any activity 
or person of the contractor’s organization not directly engaged in providing 
services under the contract or to another contractor (including subcontractors), 
government agency, private individual, or organization without prior approval. 

• Intelligence material will not be released to foreign national or immigrant 
aliens who may be employed by the contractor, regardless of the level of their 
security clearance. 

• Intelligence material will not be reproduced without prior approval. 
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• The prime contractor will maintain records which wiil permit them to furnish, 
on demand, the names of individuals who have had access to intelligence material 
in their custody. 

lOj. For Official Use Only Information (FOUO). The "For Official Use Only" 
Information provided under this contract shall be safeguarded as specified in Chapter 13, 
Section 6, ISM. 

11c. Receive and generate classified material. Classification and 
regrading/declassification markings of documentation produced by the prime contractor 
and/or Type C Consultants will be consistent with that applied to the information or 
documentation from which the new document was prepared. If a compilation of the 
information or a complete analysis of a subject appears to require a security classification 
other than that ot the source documentation, the material will be assigned the tentative 
security classification and request instructions from the office shown in item 16a. Pending 
final determination, the material will be safeguarded as required for its assigned or proposed 
classification whichever is higher, until classification is changed or otherwise verified. 

Only those contractor employees requiring access to classified information in the 
performance of this contract shall be granted security clearances under the Industrial Security 
Program. 

llg. Be authorized to use the services of DTIC or other secondary distribution 
center. The DD Form 1540 and DD Form 1541 will remain active and be kept up-to-date 
by the contractor for the duration of this contract. 

llh. Require a COMSEC Account. A STU-III only Account will be maintained by 
the contractor. 
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To Bz Asszss^T^.f^-,,^, 

(1) «/f«rf of ^tographlcteehnologUs on~ 

^<>rc«nent inurtst^ 

(O comment interests of United States industry a»w 

(2) tS! "**orests of United States eUizenJ^^ ^ 

WESTS’ 

Council in its actiin tif^ i- Research 

Secretary shall reou^'aU^'^J^ ^ f*udy une^ this section, 
ments andZer^ oppropnate Federal depart- 

Resear^C^S^ «>operation to the Na£Zi 

in 

for the study unZr this seetionT**"”**’ ehaiu be available 

study within apprSn^Jy^twt^^^eXPfl?^ ® ^ 

nty ci<anin««^£XttSeSSi^^r 7 ^^ ^ proofing of seen- 
forth the Cfmnril’^ ^port on the study shall 

ommendatiens of the conclusions and the rec- 

icy and procedures. ^ pnoemeitts in cryptography pel- 

Amtd ^ ^ Committet on 

^^^J^fned Services, the Ccmjnirte^ nn thm ^ Committee on 

nent Select Committee on lnteIliaeru-» ond the Perma- 

lives not later than 120 days ^ ^f Representa- 

submitted to the Sea^^TJ^o^ “ 
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AGREEMENT TO ESTABLISH THE ALLOWABILITY OE 
PRE-CONTRACT COSTS 
DASW01-94-R-0224 


WHEREAS, a valid and properly funded requirement exists to provide 
support to the Office of the Assistant Secretary of Defense, Director o 
Information Systems Security entitled “NATIONAL CRYPTOGRAPHY POLICY." 

WHEREAS, the proposed contractor, National Academy of Sciences (NAS), hi 
agreed to perform work in general accordance with tAe Statement of Work 
(SOW) revised dated 20 June 1994; 

WHEREAS, the government and NAS will negotiate in good- faith to reach 
contractual agreement; and 

WHEREAS, the Government requires immediate support; 

NOW, THEREFORE, in accordance with FAR 31.205-32, the following 
agreements are made pursuant to the requirements of FAR 31.109. 

FIRST: In the event that a contract is awarded, precontract coats 
not to exceed $50,000.00 shall be an allowable expense provided 
that the individual cost be incurred no sooner than 21 July 1994 and 
no precontract costs shall be allowable if incurred after 30 September 
1994 unless further written agreement is made. 

SECOND: It is understood by both parties that any costs incurred 
prior to final agreement on the proposed contract are incurred 
voluntarily on the part of the contractor and at his/her own risk. 

The undersigned acknowledge the aforementioned agreements. 



Contracting officer 


